Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
File:                     rqa1YkZ78uEmlnUJYunTMkshJj0.mft (raw, json)
Hash identifier:          sJOrSzdeUfBrLay8GH69/i94iunZRNK0Yr2SsVtLdvE=
Subject key identifier:   88:9C:5D:14:B1:0C:7D:C5:88:A5:61:5A:19:CE:C1:04:39:B9:A8:A5
Authority key identifier: AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
Certificate issuer:       /CN=A9139ECA/serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
Manifest number:          28
Signing time:             Wed 09 Sep 2026 09:13:32 +0000
Manifest this update:     Wed 09 Sep 2026 09:13:31 +0000
Manifest next update:     Wed 16 Sep 2026 09:13:31 +0000
Files and hashes:         1: rqa1YkZ78uEmlnUJYunTMkshJj0.crl (hash: 7xCPhleecG9jFJ9kZnRUSZu1BppFvpgI1gM/31oZx/w=)
                          2: 1B0AAFAE7A8C11F1B1F8078C59A30FBC.roa (hash: wfatrlh8uuEwspZHwlBADBh6qz3SMKGJNlNB+wHl+u0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
                          rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 09:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139ECA, serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
        Validity
            Not Before: Sep  9 09:13:31 2026 GMT
            Not After : Sep 16 09:13:31 2026 GMT
        Subject: CN=6aa1233b-8f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:69:ac:bb:b7:fb:b1:8e:28:10:02:24:3a:
                    4a:92:bb:cb:87:1d:31:53:9d:14:6b:88:4a:5f:1b:
                    6f:75:40:08:9f:a5:a4:5d:2c:cd:ef:63:85:42:ca:
                    a6:a0:cf:20:d0:97:9c:15:0f:08:76:bc:d8:1a:b3:
                    0b:e8:18:04:47:54:31:61:d9:f1:54:2e:17:a6:cf:
                    30:73:09:56:bb:3c:79:92:7c:0a:82:96:f7:d5:58:
                    2b:e7:4a:e1:6e:08:50:9e:73:4d:5d:27:d5:83:fa:
                    62:3a:67:c9:c1:2f:37:93:0b:29:9c:6c:e5:de:14:
                    07:d2:4e:64:31:03:ae:66:3f:3b:89:04:b6:9e:7d:
                    0b:e1:66:8b:52:3d:3a:a0:e6:10:53:9f:09:1a:98:
                    1c:f0:ba:13:70:d4:1e:3f:10:09:17:39:9e:1e:d0:
                    ae:95:24:25:70:e3:60:a4:8d:c7:03:9c:7e:78:27:
                    34:0d:68:bc:c6:46:38:9c:2e:a2:0d:3d:6f:16:29:
                    cb:bd:12:15:1d:c5:ab:0f:d5:69:26:6d:94:3e:16:
                    5d:22:fc:e3:72:20:af:d8:38:db:17:c5:83:69:49:
                    52:e8:79:5f:43:02:82:46:14:c1:46:3f:76:08:40:
                    10:d9:88:78:31:56:6a:56:ee:2e:8f:e5:25:8b:a2:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:5D:14:B1:0C:7D:C5:88:A5:61:5A:19:CE:C1:04:39:B9:A8:A5
            X509v3 Authority Key Identifier:
                keyid:AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:cc:82:ce:03:99:b3:56:30:82:95:66:28:79:c4:97:3f:
         9c:13:ed:be:ce:f8:65:54:45:7b:12:e5:4a:5b:29:b9:4a:43:
         3d:44:92:0b:97:1c:b5:20:02:dd:8a:cd:c6:7e:c0:a7:42:e0:
         21:8c:37:0e:2f:08:72:af:e4:e4:4c:81:94:35:09:01:9c:13:
         31:4f:d8:4c:d6:5a:7d:40:ef:f1:4d:d3:78:61:0c:2e:8b:21:
         ed:bf:fc:ab:e3:35:6a:8e:6d:63:8f:e2:cf:2c:a3:cb:94:12:
         50:cf:98:6d:dd:5d:6c:1e:80:9d:88:9c:0b:da:02:19:42:11:
         80:42:84:63:d1:94:b7:69:50:5e:fb:bf:51:d7:f1:67:33:68:
         3f:e3:66:4b:34:d4:49:7e:f6:95:4a:93:d8:48:16:53:16:a7:
         6c:f8:be:1f:e6:24:71:ea:df:a0:df:58:f0:2f:43:97:38:c1:
         1d:96:ce:0b:b1:a3:1e:af:43:4f:d6:9d:5e:73:7d:dc:d2:09:
         9d:59:10:3f:69:10:8a:2d:96:ec:10:62:3a:23:81:5a:ee:96:
         3e:71:4b:d3:e9:8b:8d:a8:dd:4d:e2:dc:84:58:7a:c5:a2:cd:
         ef:4d:9d:1d:4a:58:1a:98:48:92:11:c2:57:4b:c7:c1:bf:1a:
         87:1c:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:11:52 2026 by rpki-client